I received a phishing mail today supposed to be from Strato.de, a German webhost with millions of customers. I checked the mail headers and saw that it’s actually a Punycode domain.
I admit I am shocked that emClient still allows this as this opens the floodgates to phishing:
Please urgently add the option to display sender e-mails as Punycode only!